Wpmet Elements Kit Elementor Addons vulnerabilities

• roxnor elementskit elementor addons lite, wpmet elements kit elementor addons +1 more WordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerability CVE-2024-37255 5.3 MediumNovember 1, 2024
• roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 more ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget CVE-2024-10091 6.4 MediumOctober 26, 2024
• roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 more ElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content Function CVE-2024-6455 5.3 MediumJuly 18, 2024
• wpmet elements kit elementor addons WordPress ElementsKit Lite plugin <= 2.9.0 - Broken Access Control vulnerability CVE-2023-39993 4.3 MediumJune 19, 2024
• wpmet elements kit elementor addons, xpeedstudio elementskit elementor addons and templates library +1 more The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site... CVE-2024-3650 6.4 MediumMay 2, 2024
• roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 more ElementsKit Elementor addons <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module CVE-2024-3499 8.8 HighMay 2, 2024
• roxnor elementskit elementor addons lite, wpmet elements kit elementor addons +1 more WordPress ElementsKit Elementor addons plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability CVE-2024-32505 6.5 MediumApril 17, 2024
• roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 more ElementsKit Elementor addons <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget CVE-2024-2803 6.4 MediumApril 4, 2024
• roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 more ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1238 6.4 MediumMarch 30, 2024
• roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 more ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_raw CVE-2024-2047 8.8 HighMarch 30, 2024
• roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 more ElementsKit Elementor addons <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget CVE-2024-2042 6.4 MediumMarch 16, 2024
• roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 more ElementsKit Elementor addons <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1239 6.4 MediumMarch 16, 2024
• roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 more ElementsKit Lite <= 3.0.3 - Unauthenticated Sensitive Information Exposure CVE-2023-6582 5.3 MediumJanuary 11, 2024
• wpmet elements kit lite, elements kit pro, elements kit elementor addons +2 more ElementsKit and ElementsKit Pro < 2.2.0 - Contributor+ Stored XSS CVE-2021-24258 5.4 MediumMay 5, 2021